Etsy app
A private tool for one shop
It connects the Islamic Decor Gifts Etsy shop to its owner, and to nobody else.
The short version
The application is built for our own shop. The owner is its only user: there are no accounts, no sign-ups and no features for visitors. It lets the owner view and edit listings and see orders without leaving a single screen.
What it does
- Reads our shop details and listings.
- Updates our listings on the owner’s instruction.
- Reads our own orders, to prepare them for shipping.
What it does not do
- It does not access other shops, and does not scrape Etsy.
- It does not message buyers.
- It does not sell or share Etsy data, and does not send it to ad or marketing platforms.
- It does not run analytics, and does not train AI on Etsy data.
Permissions requested
shops_r | Identify the shop the app is attached to. |
listings_r | Read titles, descriptions, prices and stock. |
listings_w | Save the changes the owner makes to listings. |
transactions_r | Read orders so they can be prepared for shipping. |
How the connection is made
- The owner signs in on the private seller page with the site password.
- The owner ticks the box to accept the app terms and the privacy policy. The time and the version of the terms are stored.
- The browser is sent to Etsy, which uses OAuth 2.0 with PKCE. Etsy shows the permissions above and asks for consent. The Etsy password is entered on Etsy only.
- Etsy sends the browser back with a one-time code, and the app exchanges it for tokens.
- Tokens are encrypted with AES-256-GCM before they are stored. The status page tells the owner whether the link is active and never shows a token.
If any Etsy account other than the owner’s approves the request, the tokens are discarded immediately.
Ending the connection
The owner can choose Disconnect on the seller page, which deletes the stored tokens straight away. The same can be done from Etsy, on the connected-apps page of the account settings. Either way the app loses access at once.
The term 'Etsy' is a trademark of Etsy, Inc. This Application uses Etsy's API, but is not endorsed or certified by Etsy.